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DETAILED ACTION 

1 . A Request for Continued Examination was received on 23 June 2005. The 
amendment received 20 May 2005 has been entered and considered. Claims 1 , 8, and 
18 have been amended. No claims have been added or canceled. Claims 1-21 are 
currently pending in the present application. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-21 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Objections 

3. Claims 18-21 are objected to because of the following informalities: 
Claim 18 (and by their dependence, Claims 19-21) includes the limitation 

"building a new URL by concatenating https:// with the current URL". However, the 
current URL would already include an indication of the protocol to be used, such as 
http:// in the URL http://www.domain.com. Therefore, concatenating https:// with the 
current URL would result in, for example, https://http://www.domain.com, which would 
not be a valid URL. The Examiner notes that, in contrast, in Claims 5 and 12, a new 
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URL is built "by concatenating https:// with the domain name of the Web site", which 
would result in, for example, https://www.domain.com, a valid URL. 
Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shuster et al, US Patent 6687746, in view of Subramaniam et al, US patent 6081900. 

In reference to Claim 1 , Shuster discloses a system including a load balancer 
receiving requests from a browser via a network (column 8, lines 8-13; Figure 5, 
scheduler 68), where the requests are from a Web page having a first and second 
frame (column 8, lines 60-67; Figure 6). Shuster further discloses a plurality of servers 
coupled to the load balancer to process requests routed by the load balancer (column 9, 
lines 21 -25; Figure 5, servers 72, web servers 80, provider servers 82), where the 
frames can load objects for a target frame different from the requesting frame (column 
9, lines 25-30). However, although Shuster discloses resolving an address from a URL 
request (column 9, lines 8-20) and additionally discloses redirectors (column 8, lines 14- 
20; Figure 5, redirectors 70), Shuster does not explicitly disclose that the plurality of 
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servers generate a new URL and return a redirect message with the new URL to the 
browser. 

Subramaniam discloses a system including a border server to receive requests 
from a client browser via a network (column 5, lines 26-27; Figure 1 , Border Server 106) 
and a plurality of servers coupled to the border server (column 5, lines 25-26 where 
there can be multiple target servers), where the servers generate a new URL and return 
a redirect message with the new URL in response to a request from the browser and 
the browser uses the new URL in a new request (column 9, lines 18-31). Therefore, it 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the system of Shuster by including the generation and return of new 
URLs as taught by Subramaniam, in order to provide secure authentication of external 
users and secure transmission of confidential data (see Subramaniam, column 3, line 
66-column 4, line 4). 

In reference to Claim 2, Subramaniam further discloses generating the new URL 
and returning the redirect message (column 9, lines 18-31). 

In reference to Claim 3, Subramaniam further discloses that the servers include a 
secured area and an unsecured area (column 10, lines 10-12). 

In reference to Claims 4 and 5, Subramaniam further discloses that HTTPS is 
automatically invoked by concatenating "https://" with the domain name of the website 
(column 9, lines 21-25). 

In reference to Claim 6, Subramaniam further discloses that the border server 
can perform SSL encryption and decryption (column 11, lines 40-42). 
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In reference to Claim 7, Subramaniam further discloses that communication 
between the border server and the plurality of servers is transmitted as cleartext 
(column 9, lines 32-40, where non-secure data is sent from the target server to the 
border server). 

In reference to Claim 8, Shuster discloses a method including receiving requests 
from a browser via a network (column 7, lines 50-54) where the requests are from a 
Web page having a first and second frame (column 8, lines 60-67; Figure 6) and routing 
the requests to one server in an array of servers to process the requests (column 9, 
lines 21-25). Shuster further discloses that a request can be received from a requesting 
frame to load a data object for a target frame with a different owner (column 9, lines 25- 
30). However, although Shuster discloses resolving an address from a URL request 
(column 9, lines 8-20) and additionally discloses redirectors (column 8, lines 14-20; 
Figure 5, redirectors 70), Shuster does not explicitly disclose generating a new URL and 
returning a redirect message with the new URL to the browser. 

Subramaniam discloses a method including receiving requests from a client 
browser via a network, routing the request to a server, and if the request is received to 
load a data object for a target, generating a new URL and returning a redirect message 
with the new URL to the client browser (column 9, lines 18-31 ). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to modify the method of Shuster by including the generation and return of new URLs as 
taught by Subramaniam, in order to provide secure authentication of external users and 
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secure transmission of confidential data (see Subramaniam, column 3, line 66-column 
4, line 4). 

In reference to Claim 9, Subramaniam further discloses the client browser 
receiving the redirect message and sending a new request using the new URL (column 
9, lines 25-31). 

In reference to Claim 10, Shuster discloses that each server is coupled to a load 
balancer (column 8, lines 8-13; Figure 5, scheduler 68). Further, Subramaniam 
discloses that the servers include a secured area and an unsecured area (column 10, 
lines 10-12). 

In reference to Claims 1 1 and 12, Subramaniam further discloses that HTTPS is 
automatically invoked by concatenating "https://" with the domain name of the website 
(column 9, lines 21-25).. 

In reference to Claim 13, Subramaniam further discloses that the border server 
can perform SSL encryption and decryption (column 1 1 , lines 40-42). 

In reference to Claim 14, Shuster further discloses a load balancer (column 8, 
lines 8-13; Figure 5, scheduler 68). Further, Subramaniam further discloses that 
communication between the border server and the plurality of servers is transmitted as 
cleartext (column 9, lines 32-40, where non-secure data is sent from the target server to 
the border server). 

In reference to Claim 15, Shuster discloses software that receives a request from 
a frame of a browser to load data for a target frame and determines if the owner of the 
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target frame is different (column 9, lines 25-30). However, although Shuster discloses 
resolving an address from a URL request (column 9, lines 8-20) and additionally 
discloses redirectors (column 8, lines 14-20; Figure 5, redirectors 70), Shuster does not 
explicitly disclose generating a new URL and returning a redirect message with the new 
URL to the browser. 

Subramaniam discloses software that receives a request from a client browser to 
load a data object for a target and determines if the target is owned by a different 
owner, and if so, generates a new URL and returns a redirect message with the new 
URL to the client browser (column 9, lines 18-31). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time the invention was made to modify 
the software of Shuster by including the generation and return of new URLs as taught 
by Subramaniam, in order to provide secure authentication of external users and secure 
transmission of confidential data (see Subramaniam, column 3, line 66-column 4, line 
4). 

In reference to Claim 16, Subramaniam further discloses the client browser 
receiving the redirect message and sending a new request using the new URL (column 
9, lines 25-31). 

In reference to Claim 17, Subramaniam further discloses that the redirect 
message instructs the client browser to switch from HTTP to HTTPS (column 9, lines 
21-25). 
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In reference to Claim 18, Shuster discloses software that access a current URL 
used to locate an HTML document loaded in one of multiple frames displayed by a Web 
browser (column 9, lines 8-38). However, although Shuster discloses resolving an 
address from a URL request (column 9, lines 8-20) and additionally discloses 
redirectors (column 8, lines 14-20; Figure 5, redirectors 70), Shuster does not explicitly 
disclose building a new URL and dispatching a new request using the new URL 
between the browser and a Web server. 

Subramaniam discloses software that accesses a current URL, builds a new URL 
by concatenating "https://" with the current URL, and dispatches the new URL to invoke 
HTTPS communication between a web browser and a web server (column 9, lines 18- 
31 ). Therefore, it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to modify the software of Shuster by including the generation 
and return of new URLs as taught by Subramaniam, in order to. provide secure 
authentication of external users and secure transmission of confidential data (see 
Subramaniam, column 3, line 66-column 4, line 4). 

In reference to Claim 19, Subramaniam further discloses embedding in an HTML 
document (column 9, lines 32-43, where URL links in web pages are changed). 

In reference to Claim 20, Shuster further discloses a load balancer (column 8, 
lines 8-13; Figure 5, scheduler 68) and a plurality of servers (column 9, lines 21-25; 
Figure 5, servers 72, web servers 80, provider servers 82). 

In reference to Claim 21, Subramaniam further discloses that HTTPS is 
automatically invoked when entering a secure area (column 7, lines 1-25). 
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Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Hobbs, US Patent 6523022, discloses a method that includes a proxy 
application server and multiple database servers, in which the servers provide 
data to various frames in displayed information. 

b. McDonough et al, US Patent 6631424, discloses a system in which a 
server is coupled to multiple back-end servers, where the servers can load a 
frames display, and where load balancing may be performed. 

c. Rath et al, US Patent 6686932, discloses a system for sharing data from 
separate servers between browser frames. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Zachary A. Davis whose telephone number is (571 ) 272- 
3870. The examiner can normally be reached on weekdays 8:30-6:00, alternate 
Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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SUPERVISORY PATENT EXAMINER 




